At the core of this kernel flaw is a failure to decrement the re_receiving counter in the xprtrdma subsystem when rpcrdma_post_recvs exits prematurely or cannot allocate a work request. Because the counter never reaches zero, rpcrdma_xprt_drain blocks indefinitely, causing a kernel worker task to hang and the system to be unable to process RDMA RPC traffic. The weakness can be classified as CWE‑772 (Missing Release of Resource) due to the unreleased counter resource. The direct consequence is a local denial of service manifested as hung kernel tasks and degraded system responsiveness.

This defect exists wherever the legacy xprtrdma RPC transport is compiled into the Linux kernel, from kernel 6.18 and earlier up to 7.0‑rc3 as indicated by the known CPE ranges. It is present in all releases that have not applied the kernel patches referenced in the CVE advisory. No specific version numbers beyond the range are provided; any kernel build that includes the xprtrdma stack is potentially affected.

The vulnerability is scored CVSS 7.5, EPSS <1%, and is not listed in the CISA KEV catalog. It cannot be exploited remotely; the attack vector is local, requiring a process that can trigger a high‑memory or allocation failure so that rpcrdma_post_recvs exits early. Based on the description, it is inferred that a privileged user or a kernel‑module attacker could induce the failure. The low EPSS indicates that exploitation is unlikely, and the impact is confined to the local system where the kernel runs.